ssl mode verify-full fails because 127.0.0.1:37849 not in cert SAN's

[nyc-de]

Sling version:

Version: 1.5.15

What is the Operating System?

Linux

Do you have a CLI Pro/Platform subscription?

No

Description of the issue

ssl mode verify-full fails because 127.0.0.1:37849 not in cert SAN's

Using verify-ca works.

Replication Configuration

connections:

  MY_CONN:
    type: postgres
    database: db
    host: host.rds.amazonaws.com
    password: pass
    port: 5432
    sslmode: verify-full&sslrootcert=~/.sling/server-cert.pem
    user: readonly
    proxy_url: socks5://proxy_url:1080

Log Output

$ sling conns test MY_CONN --debug
3:11PM WRN could not parse DEBUGINFOD_URLS: could not parse provided credentials / url for DEBUGINFOD_URLS
3:11PM WRN could not parse DEBUGINFOD_URLS: could not parse provided credentials / url for DEBUGINFOD_URLS
2026-04-30 15:11:24 DBG SOCKS5 proxy tunnel established -> 127.0.0.1:37849 to host.rds.amazonaws.com:5432
2026-04-30 15:11:24 DBG closed "postgres" connection (conn-postgres-host)
fatal:
--- proc.go:285 main ---
--- sling_cli.go:532 main ---
--- sling_cli.go:573 cliInit ---
--- cli.go:287 CliProcess ---
--- sling_conns.go:199 processConns ---
--- connection_local.go:74 Test ---
~ could not test MY_CONN
--- connection_discover.go:30 Test ---
~ could not connect to MY_CONN
--- database_postgres.go:64 Connect ---
~ could not connect to database(try adding `sslmode=require` or `sslmode=disable`)
--- database.go:765 Connect ---
tls: failed to verify certificate: x509: cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs